Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/3FQQU4QrvbP8xB5Sv7tBzbQlMxI.roa
File:                     3FQQU4QrvbP8xB5Sv7tBzbQlMxI.roa (raw, json)
Hash identifier:          QKvuEzfkf7X+r/rRQpjhx7UH9/WpV19Lav7WU2voChM=
Subject key identifier:   DC:54:10:53:84:2B:BD:B3:FC:C4:1E:52:BF:BB:41:CD:B4:25:33:12
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       FC
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/3FQQU4QrvbP8xB5Sv7tBzbQlMxI.roa
Signing time:             Fri 10 Jun 2022 02:36:13 +0000
ROA not before:           Fri 10 Jun 2022 02:36:13 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     4713
IP address blocks:        211.130.64.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 252 (0xfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Jun 10 02:36:13 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=DC541053842BBDB3FCC41E52BFBB41CDB4253312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4a:e7:ee:5d:4d:aa:77:a7:31:73:ab:4a:de:
                    ec:45:a7:49:52:ff:21:7f:e6:a0:59:1b:a6:6e:08:
                    ea:b4:b7:9d:bf:ad:95:20:68:49:c3:fe:ba:e2:42:
                    b1:a1:c8:53:ab:7c:28:52:2f:f9:e1:33:db:6a:01:
                    82:ac:25:da:b5:a9:eb:bb:93:b8:47:de:ba:b0:24:
                    69:95:27:47:56:1e:e4:6a:eb:92:90:33:b8:b0:d2:
                    cf:09:97:85:2a:60:d4:09:09:6e:e7:6c:a3:49:d6:
                    2e:15:83:60:59:17:6e:40:a0:43:7c:5b:94:b5:22:
                    72:e4:92:47:d8:4e:be:95:e3:53:28:f7:75:2a:53:
                    ac:61:7d:dc:22:64:9e:1c:db:ec:15:27:24:d9:f3:
                    19:fb:ce:dd:f2:d4:6d:70:eb:a9:50:ea:f8:ba:53:
                    d8:c3:29:6d:13:03:40:bc:a3:a7:bb:59:25:ab:9b:
                    c4:24:7d:5e:b9:c4:e1:2a:ce:6d:43:86:ce:41:a7:
                    cb:2d:41:e3:07:b7:f3:45:06:0f:21:49:14:60:f3:
                    2c:78:b3:61:0c:55:b3:0d:74:8f:5e:a8:88:a7:46:
                    3f:50:f3:42:57:c7:68:29:1b:bc:45:17:1d:46:c7:
                    09:ee:a1:33:c4:fd:c8:1f:4a:71:f9:16:f6:45:dd:
                    f6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:54:10:53:84:2B:BD:B3:FC:C4:1E:52:BF:BB:41:CD:B4:25:33:12
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/3FQQU4QrvbP8xB5Sv7tBzbQlMxI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.130.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         05:ad:f5:bb:0f:d4:db:00:7a:cf:74:db:3e:d4:d2:69:4d:41:
         d6:51:cc:11:8b:fc:85:1a:a5:99:e8:f7:07:4e:87:3c:95:89:
         6b:c1:50:d1:8b:f1:9d:22:5e:ea:f6:d3:e4:60:67:44:3c:3e:
         c5:f5:dc:e2:2d:6b:6c:6d:db:a0:28:a9:67:47:b1:66:c5:24:
         37:f7:fd:00:0e:31:e4:f2:d9:d2:aa:1e:c8:c3:32:cc:6b:41:
         f1:0f:e5:f6:ac:9a:fc:4b:fa:c0:de:06:52:7e:f1:a0:1e:e6:
         e2:94:0b:69:5c:10:e2:13:0c:41:2d:1c:02:11:88:45:d0:77:
         30:69:6f:50:a2:35:5c:ee:83:30:e4:a3:3e:7e:83:fd:11:03:
         77:40:ef:09:e4:c4:da:11:a8:7b:4a:a0:71:df:a9:63:08:60:
         c1:a7:8f:50:6c:01:b8:5a:10:b2:83:c1:38:5b:db:5e:65:b3:
         6f:b2:3d:55:4c:e5:6f:01:c6:df:88:ab:57:20:0d:20:9b:1f:
         c1:5c:38:3f:5a:d6:37:6c:2e:2c:01:cf:25:9e:61:31:fa:22:
         d2:0a:05:f3:05:ee:53:f0:65:d9:e3:51:d2:a7:e6:ae:fd:04:
         97:4a:5a:ec:79:fd:c7:d5:88:a3:d1:ed:ea:42:f5:5e:01:65:
         41:ea:21:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org